🟢 Low ⏱ 5–15 min Last verified: 14 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gtetrinet — remote code execution Related CVEs: CVE-2006-3125 Upstream summary: The Debian Security Team reports: Michael Gehring discovered several potential out-of-bounds index accesses in gtetrinet, a multiplayer Tetris-like game, which […]
🟡 Medium ⏱ 10–30 min Last verified: 14 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6417 Upstream summary: Rails weblog: Rails 3.2.16 and 4.0.2 have been released! These two releases contain important security fixes, so […]
🟢 Low ⏱ 5–15 min Last verified: 13 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby — Denial of Service and Unsafe Object Creation Vulnerability in JSON Related CVEs: CVE-2013-0269 Upstream summary: Aaron Patterson reports: When parsing certain JSON documents, the JSON gem can be […]
🟡 Medium ⏱ 10–30 min Last verified: 13 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]
🟠 High ⏱ 15–60 min Last verified: 13 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rails — multiple vulnerabilities Related CVEs: CVE-2007-3227 CVE-2007-6077 CVE-2008-4094 CVE-2012-3463 CVE-2012-3464 CVE-2012-3465 CVE-2012-5664 CVE-2013-0155 +12 more Upstream summary: Ruby on Rails blog: Rails 4.2.5.2, 4.1.14.2, and 3.2.22.2 have been released! […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: suPHP — Privilege escalation Related CVEs: CVE-2008-1614 Upstream summary: suPHP developer Sebastian Marsching reports: When the suPHP_PHPPath was set, mod_suphp would use the specified PHP executable to pretty-print PHP source […]
🟢 Low ⏱ 5–15 min Last verified: 12 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: frontpage — cross site scripting vulnerability Related CVEs: CVE-2006-0015 Upstream summary: Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 (included in Windows Sever 2003 IIS 6.0 and available as […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: atheme-services — multiple vulnerabilities Related CVEs: CVE-2014-9773 CVE-2016-4478 Upstream summary: Mitre reports: modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mysql — SSL Downgrade Related CVEs: CVE-2015-3152 Upstream summary: Duo Security reports: Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker […]
🟢 Low ⏱ 5–15 min Last verified: 11 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nbsmtp — format string vulnerability Upstream summary: When nbsmtp is executed in debug mode, server messages will be printed to stdout and logged via syslog. Syslog is used insecurely and […]
